Understanding Spam Rentals & Fraudulent Charges

ďťżWhy this happens with faster online rentalsďťż
When it becomes easier for good customers to rent online, it also becomes easier for bad actors to try. Older self-storage rental systems usually had 3 to 6 pages creating more friction. That extra friction slowed down both real renters and fraud attempts.Â
Our newer one-page checkout makes renting faster and easier, similar to modern eCommerce like Shopify. This improves conversion rates and helps more real customers complete rentals.Â
But less friction also means:Â
- More spam rentalsÂ
- More bot activityÂ
- More stolen card attemptsÂ
- More fraudulent chargesÂ
This is normal across eCommerce. Most industries deal with this every day.Â
The difference is that self-storage has traditionally relied on slow, multi-step rentals, so many operators are seeing this challenge for the first time.Â

The 3 Systems InvolvedÂ
There are three separate vendors involved in every online rental:Â
- Website Platform - StoragelyÂ
- Storagely controls the online rental experience, website flow, and fraud prevention measures before payment is submitted.Â
- Facility Management Software (FMS)Â
- Examples include SiteLink, EDGE, Yardi, Monument, Cubby, and Self Storage Manager. The FMS receives the rental details and passes payment requests to the payment processor.Â
- Payment Processor / GatewayÂ
- This is where the actual credit card authorization happens. This provider determines whether a card is approved, declined, flagged, or potentially fraudulent.Â

Important: Storagely Does NOT Process Credit Cards
Storagely does not run credit cards, approve payments, decline payments, or make fraud decisions. We handle the online rental experience and send the payment request through the system.
Hereâs how it works:
- Storagely (Website) â FMS â Payment Processor
- Then the response comes back:
- Payment Processor â FMS â Storagely
Who decides if the card is approved?
The payment processor and the renterâs bank make that decision, not Storagely.
They decide if a card is:
- Approved
- Declined
- Flagged for fraud
- Blocked for security reasons
Example: âDo Not HonorâÂ
If you see a decline message like: Do Not HonorÂ
This message is coming from the payment processor or the customerâs bank. It does not come from Storagely. It usually means the bank declined the charge but did not give a specific reason.Â
Important to knowÂ
The system must try the payment first before a decline code like this can be returned. That means the card was submitted for authorization, and the processor or bank made the final decision.

What Storagely Already Does to Reduce FraudÂ
We stop a large amount of fraud before it ever reaches your FMS. Here are the protections already in place:
- IP Rate LimitingÂ
- Limits how often someone can try to rent from the same IP address in a short period of time. This helps stop rapid bot attacks. More aggressive limits can block more fraud, but if set too high, they can also block real customers.Â
- IP Hard BlockingÂ
- We block known VPNs, suspicious traffic, and IP addresses commonly linked to fraud. This helps stop repeat bad actors from reaching checkout.Â
- Geographic Restrictions (Geofencing)Â
- Optional location-based restrictions that control where rentals can come from. Common approved regions include:Â
- United StatesÂ
- CanadaÂ
- GuamÂ
- Other approved regionsÂ
This helps reduce international fraud attempts.Â
CAPTCHA ProtectionÂ
- Helps stop automated bots from submitting fake rentals.Â
Email ValidationÂ
- We use services like ZeroBounce to detect fake, disposable, suspicious, or invalid email addresses before a rental is submitted.Â
Behavioral ValidationÂ
- We monitor for unusual patterns in how forms are completed. This helps identify bots, scripts, and suspicious activity before checkout is completed. For security reasons, we do not publicly share the exact rules behind this system.Â
What Storagely CANNOT DetectÂ
There are important limits to fraud prevention:Â
- We Cannot Know if a Card is Fraudulent Before AuthorizationÂ
- Only the payment processor can determine this. A card may look valid until an authorization attempt is made. That fraud signal comes back from the processor, not from Storagely.Â
- Sophisticated Fraud Can Look HumanÂ
- Modern fraud tools and AI can simulate legitimate browser activity and human behavior. This makes some fraud extremely difficult for any platform to detect. This is an issue that ALL E-commerce platforms deal with on a daily basis.
Additional Protection Â
(With Conversion Trade-Offs)Â
While there are more aggressive fraud prevention measures we could implement, each additional layer of security creates a direct tradeoff with conversion rates. Stronger restrictions often introduce more friction for legitimate customers creating longer checkout times, more verification steps, failed validations, blocked transactions, and increased abandonment during the rental process.Â
In self-storage, where speed and convenience are major drivers of online rentals, too much friction can significantly reduce completed move-ins from real customers. The goal is not simply to block every possible fraudulent attempt, but to create the right balance between protection and conversion, stopping bad actors without making it harder for legitimate renters to do business with you.Â
What Customers Should Also ReviewÂ
Fraud prevention is not only a website issue. Your FMS settings and payment processor settings are equally important. We strongly recommend reviewing:Â
Payment Processor Fraud RulesÂ
Examples:Â
- AVS verificationÂ
- CVV requirementsÂ
- Velocity checksÂ
- Address matchingÂ
- High-risk transaction flagsÂ
- Country restrictionsÂ
Many processors allow stricter fraud screening that may not be enabled by default.Â
FMS ConfigurationÂ
- Some FMS platforms allow additional payment validation settings or approval workflows. These should be reviewed with your FMS provider.
If Fraud Happens, What is Next?Â
If a fraudulent rental gets through:Â
- Step 1: Contact Your FMS TeamÂ
- They can help reverse the rental and identify what transaction occurred.Â
- Step 2: Contact Your Payment ProcessorÂ
- They control refunds, chargebacks, and fraud review decisions. They can explain processor response codes and card authorization outcomes.Â
- Step 3: Contact StoragelyÂ
- We can review the following to see if any further improvements can be made:Â
- Rental sourceÂ
- IP historyÂ
- Fraud patternsÂ
- Additional blocking opportunitiesÂ
- Geofencing recommendationsÂ
- Checkout behavior review.Â
Final TakeawayÂ
Faster checkout improves rentals. But faster checkout also requires stronger fraud management.Â
This is not a failure of the website, it is a shared responsibility across:Â
- Website PlatformÂ
- FMSÂ
- Payment ProcessorÂ
The goal is not to eliminate all fraud (which is impossible). The goal is to reduce fraud while still allowing real customers to rent easily.
That balance is where strong operators win.Â